Merge pull request #415 from celo-org/op-node-netrestric

OP Node netrestric

Author: alvarof2

charts/op-node/Chart.yaml

@@ -1,7 +1,7 @@
 ---
 name: op-node
 apiVersion: v2
-version: 0.4.3
+version: 0.4.4
 description: Celo implementation for op-node consensus engine (Optimism Rollup)
 home: https://clabs.co
 sources:

charts/op-node/README.md

@@ -1,6 +1,6 @@
 # op-node
 
-![Version: 0.4.3](https://img.shields.io/badge/Version-0.4.3-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: v1.0.0](https://img.shields.io/badge/AppVersion-v1.0.0-informational?style=flat-square)
+![Version: 0.4.4](https://img.shields.io/badge/Version-0.4.4-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: v1.0.0](https://img.shields.io/badge/AppVersion-v1.0.0-informational?style=flat-square)
 
 Celo implementation for op-node consensus engine (Optimism Rollup)
 Initially based on [dysnix/charts/op-node](https://github.com/dysnix/charts/tree/main/dysnix/op-node).
@@ -49,6 +49,7 @@ Initially based on [dysnix/charts/op-node](https://github.com/dysnix/charts/tree
 | config.p2p.bootnodes | list | `[]` |  |
 | config.p2p.keys | string | `""` |  |
 | config.p2p.nat | bool | `false` |  |
+| config.p2p.netrestrict | list | `[]` |  |
 | config.p2p.noDiscovery | bool | `false` |  |
 | config.p2p.port | int | `9222` |  |
 | config.p2p.sequencer.key | string | `""` |  |

charts/op-node/templates/statefulset.yaml

@@ -194,6 +194,9 @@ spec:
             {{- if .Values.config.p2p.noDiscovery }}
             --p2p.no-discovery \
             {{- end }}
+            {{- with .Values.config.p2p.netrestrict }}
+            --netrestrict={{ join "," . }} \
+            {{- end }}
             --p2p.priv.path=$datadir/opnode_p2p_priv.txt \
             --log.level={{ .Values.config.logLevel }} \
             {{- with .Values.config.syncmode }}

charts/op-node/values.yaml

@@ -261,6 +261,7 @@ config:
     useHostPort: false                 # use hostPort for p2p traffic instead of dedicated k8s svc
     bootnodes: []                      # override bootnodes
     static: []                         # static peers
+    netrestrict: []                    # restrict network access to specific IPs
     noDiscovery: false                 # disable peer discovery
     keys: ""                           # comma separated list of keys to use for p2p
     sequencer: